MS Internet Explorer URL Injection in History List (MS04-004)

Exploit for unknown platform in category remote exploits ============================================================= MS Internet Explorer URL Injection in History List MS04-004 ============================================================= // Andreas Sandblad, 2004-02-03, patched by MS04-004 //...

Microsoft Internet Explorer - URL Injection in History List (MS04-004)

// Andreas Sandblad, 2004-02-03, patched by MS04-004 // Name: payload // Purpose: Run payload code called from Local Machine zone. // The code may be arbitrary such as executing shell commands. // This demo simply creates a harmless textfile on the desktop. function payload file = "sandblad.txt";...

Microsoft Internet Explorer 5 - NavigateAndFind() Cross-Zone Policy (MS04-004)

source: https://www.securityfocus.com/bid/9568/info A vulnerability has been reported in Microsoft Internet Explorer. Because of this, an attacker may be able to violate cross-zone policy. It has been reported that the issue presents itself due to a failure by Internet Explorer to remove JavaScri...

Opera: What's Next (GM#005-OP)

GreyMagic Security Advisory GM005-OP ===================================== By GreyMagic Software, Israel. 04 Feb 2003. Available in HTML format at http://security.greymagic.com/adv/gm005-op/. Topic: Opera: What's Next. Discovery date: 28 Jan 2003. Affected applications: ====================== Ope...

Opera 7.0 - Error Message History Disclosure

source: https://www.securityfocus.com/bid/6759/info It has been reported that Opera fails to ensure that a remote site has proper authorization before executing some methods used to access error messages stored in the Opera console. This issue is further exacerbated by the fact that error message...

Opera 7.0 - History Object Information Disclosure

Opera 7.0 - History Object Information Disclosure source: https://www.securityfocus.com/bid/6757/info An information disclosure weakness has been reported for Opera 7 browsers on the Microsoft Windows platform. The weakness is due to the way the history object exposes some properties. Specificall...

Opera 7.0 - History Object Information Disclosure

source: https://www.securityfocus.com/bid/6757/info An information disclosure weakness has been reported for Opera 7 browsers on the Microsoft Windows platform. The weakness is due to the way the history object exposes some properties. Specifically, the properties history.next and history.previou...

CVE-2002-1834

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and 1 submit print jobs directly into the "print now" queue or 2 read the scanner job history...

CVE-2002-1204

Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the userpref function and accessing the prefs.js file, which is stored in a...

Microsoft Internet Explorer 5.56.0 - History List Script Injection

Microsoft Internet Explorer 5.56.0 - History List Script Injection source: https://www.securityfocus.com/bid/4505/info A vulnerability has been reported in some versions of Internet Explorer. It is possible to inject JavaScript code into the browser history list, and execute it within any page...

Microsoft Internet Explorer 5.5/6.0 - History List Script Injection

source: https://www.securityfocus.com/bid/4505/info A vulnerability has been reported in some versions of Internet Explorer. It is possible to inject JavaScript code into the browser history list, and execute it within any page context given appropriate user interaction. Internet Explorer stores...

CVE-2001-0378

CVE-2001-0378 affects OpenBSD readline prior to 4.1 (OpenBSD 2.8 and earlier). The vulnerability stems from creating readline history files with insecure permissions, allowing a local attacker to recover potentially sensitive information via history files. The NVD metrics list a base score of 2.1...

CVE-1999-1446

Technical details for CVE-1999-1446 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-1462

The CVE-1999-1462 issue affects the Big Brother bb-hist.sh History module, specifically in Big Brother 1.09b and 1.09c. The vulnerability is a directory traversal flaw exposed through the HISTFILE parameter of the bb-hist.sh CGI, allowing a remote attacker to read arbitrary files on the affected ...

CVE-1999-1462

Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files...

CVE-1999-1446

Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored...

Another bug in phpNuke

Yes, i have found some bugs also... You can execute artibility mysql statments in many of its different scripts... reviews.php for example.. The parmenter with the id reviews.php?id=blah think doesn't check... so you can simply do reviews.php?id=12345 or ........ blah blah blah I don't think its...

CVE-2000-0368

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data...

CVE-2000-0368

The CVE-2000-0368 entry concerns Cisco IOS 9.1 and later. The root issue is that attackers with access to the login prompt can view portions of the command history from previous users, potentially exposing sensitive data. Affected software: Cisco IOS 9.1 and newer. Vulnerability details such as e...

Netscape 4.76 gif comment flaw

Product: Netscape Navigator/Communicator Tested on: 4.76 on Linux and Win98/NT Vendor Contact: Reported 2001-03-22 Problem -------------------------------------------------------- - Overview: The Netscape browser does not escape the gif file comment in the image information page. This allows...